CVE Database /
CVE-2023-0405
CVE · Medium
CVE-2023-0405 — AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.4.38
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-0405
|
AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.4.38 |
Missing Authorization |
Medium
4.3
|
< 1.4.38
|
1.4.38 |
2023-01-19 |
—
|
CVE-2023-0405
The AI Puffer plugin for WordPress, versions prior to 1.4.38, contains a content injection vulnerability that could permit attackers to insert arbitrary content into website pages and posts. An attacker could exploit this flaw to inject malicious content, including phishing pages designed to deceive users. The vulnerability was identified and reported by Lana Codes and has been remediated in version 1.4.38 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings